{"id":"https://openalex.org/W3091889505","doi":"https://doi.org/10.1109/dac18072.2020.9218603","title":"ICS Protocol Fuzzing: Coverage Guided Packet Crack and Generation","display_name":"ICS Protocol Fuzzing: Coverage Guided Packet Crack and Generation","publication_year":2020,"publication_date":"2020-07-01","ids":{"openalex":"https://openalex.org/W3091889505","doi":"https://doi.org/10.1109/dac18072.2020.9218603","mag":"3091889505"},"language":"en","primary_location":{"id":"doi:10.1109/dac18072.2020.9218603","is_oa":false,"landing_page_url":"https://doi.org/10.1109/dac18072.2020.9218603","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 57th ACM/IEEE Design Automation Conference (DAC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078630181","display_name":"Zhengxiong Luo","orcid":"https://orcid.org/0000-0001-6522-9269"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhengxiong Luo","raw_affiliation_strings":["KLISS, BNRist, School of Software, Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KLISS, BNRist, School of Software, Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006395264","display_name":"Feilong Zuo","orcid":"https://orcid.org/0000-0003-2589-2255"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Feilong Zuo","raw_affiliation_strings":["KLISS, BNRist, School of Software, Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KLISS, BNRist, School of Software, Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031776155","display_name":"Yuheng Shen","orcid":"https://orcid.org/0000-0002-2667-5431"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuheng Shen","raw_affiliation_strings":["KLISS, BNRist, School of Software, Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KLISS, BNRist, School of Software, Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016146461","display_name":"Xun Jiao","orcid":"https://orcid.org/0000-0003-4476-2501"},"institutions":[{"id":"https://openalex.org/I7863295","display_name":"Villanova University","ror":"https://ror.org/02g7kd627","country_code":"US","type":"education","lineage":["https://openalex.org/I7863295"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xun Jiao","raw_affiliation_strings":["KLISS, BNRist, School of Software, Villanova University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KLISS, BNRist, School of Software, Villanova University","institution_ids":["https://openalex.org/I7863295"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072023674","display_name":"Wanli Chang","orcid":"https://orcid.org/0000-0002-4053-8898"},"institutions":[{"id":"https://openalex.org/I52099693","display_name":"University of York","ror":"https://ror.org/04m01e293","country_code":"GB","type":"education","lineage":["https://openalex.org/I52099693"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Wanli Chang","raw_affiliation_strings":["KLISS, BNRist, School of Software, University of York"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KLISS, BNRist, School of Software, University of York","institution_ids":["https://openalex.org/I52099693"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5060117799","display_name":"Yu Jiang","orcid":"https://orcid.org/0000-0003-0955-503X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yu Jiang","raw_affiliation_strings":["KLISS, BNRist, School of Software, Tsinghua University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"KLISS, BNRist, School of Software, Tsinghua University","institution_ids":["https://openalex.org/I99065089"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":7.7448,"has_fulltext":true,"cited_by_count":63,"citation_normalized_percentile":{"value":0.97775556,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11005","display_name":"Radiation Effects in Electronics","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fuzz-testing","display_name":"Fuzz testing","score":0.9656480550765991},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7673678994178772},{"id":"https://openalex.org/keywords/network-packet","display_name":"Network packet","score":0.7186146378517151},{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.6839235424995422},{"id":"https://openalex.org/keywords/protocol","display_name":"Protocol (science)","score":0.6139124035835266},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.4446898102760315},{"id":"https://openalex.org/keywords/modbus","display_name":"Modbus","score":0.42485329508781433},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3874424695968628},{"id":"https://openalex.org/keywords/communications-protocol","display_name":"Communications protocol","score":0.34347766637802124},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.32675254344940186},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2312888503074646},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.22488874197006226},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.18988388776779175},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.1791217029094696}],"concepts":[{"id":"https://openalex.org/C111065885","wikidata":"https://www.wikidata.org/wiki/Q1189053","display_name":"Fuzz testing","level":3,"score":0.9656480550765991},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7673678994178772},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.7186146378517151},{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.6839235424995422},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.6139124035835266},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.4446898102760315},{"id":"https://openalex.org/C2776666747","wikidata":"https://www.wikidata.org/wiki/Q1135322","display_name":"Modbus","level":3,"score":0.42485329508781433},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3874424695968628},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.34347766637802124},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.32675254344940186},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2312888503074646},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.22488874197006226},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.18988388776779175},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.1791217029094696},{"id":"https://openalex.org/C204787440","wikidata":"https://www.wikidata.org/wiki/Q188504","display_name":"Alternative medicine","level":2,"score":0.0},{"id":"https://openalex.org/C142724271","wikidata":"https://www.wikidata.org/wiki/Q7208","display_name":"Pathology","level":1,"score":0.0},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/dac18072.2020.9218603","is_oa":false,"landing_page_url":"https://doi.org/10.1109/dac18072.2020.9218603","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 57th ACM/IEEE Design Automation Conference (DAC)","raw_type":"proceedings-article"},{"id":"pmh:oai:eprints.whiterose.ac.uk:164941","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4306400854","display_name":"White Rose Research Online (University of Leeds, The University of Sheffield, University of York)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I2800616092","host_organization_name":"White Rose University Consortium","host_organization_lineage":["https://openalex.org/I2800616092"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"Proceedings Paper"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.5299999713897705,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[{"id":"https://openalex.org/G2217080263","display_name":null,"funder_award_id":"61400010107","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G3802361454","display_name":null,"funder_award_id":"2019YFB1706200","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7520802981","display_name":null,"funder_award_id":"61802223","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W1710734607","https://openalex.org/W1970005004","https://openalex.org/W2039427951","https://openalex.org/W2065948900","https://openalex.org/W2098456636","https://openalex.org/W2107147876","https://openalex.org/W2134633067","https://openalex.org/W2147002252","https://openalex.org/W2401312886","https://openalex.org/W2517087431","https://openalex.org/W2701225458","https://openalex.org/W2962918166","https://openalex.org/W2980096664","https://openalex.org/W4238083723","https://openalex.org/W4239813889","https://openalex.org/W6637688222","https://openalex.org/W6740232425","https://openalex.org/W6764065038"],"related_works":["https://openalex.org/W3208265074","https://openalex.org/W4297097635","https://openalex.org/W1619258821","https://openalex.org/W2361087859","https://openalex.org/W2949185247","https://openalex.org/W2384614413","https://openalex.org/W2393069806","https://openalex.org/W2348799263","https://openalex.org/W2389167263","https://openalex.org/W2367123570"],"abstract_inverted_index":{"Industrial":[0],"Control":[1],"System":[2],"(ICS)":[3],"protocols":[4,27,145],"play":[5],"an":[6],"essential":[7],"role":[8],"in":[9,25],"building":[10],"communications":[11],"among":[12],"system":[13],"components.":[14],"Recently,":[15],"many":[16],"severe":[17],"vulnerabilities,":[18],"such":[19,53,146],"as":[20,54,147],"Stuxnet":[21],"and":[22,61,80,100,139,149,168,189],"DragonFly,":[23],"exposed":[24,191],"ICS":[26,144],"have":[28],"affected":[29],"a":[30],"wide":[31],"distribution":[32],"of":[33,38,50,63,127,132,175],"devices.":[34],"Therefore,":[35],"it":[36],"is":[37,56,130],"vital":[39],"importance":[40],"to":[41,70],"ensure":[42],"their":[43],"correctness.":[44],"However,":[45],"the":[46,59,64,72,84,88,133,156,164,173],"vulnerability":[47],"detection":[48,170],"efficiency":[49],"traditional":[51,73],"techniques":[52],"fuzzing":[55,75],"challenged":[57],"by":[58],"complexity":[60],"diversity":[62],"protocols.In":[65],"this":[66],"paper,":[67],"we":[68,108,119],"propose":[69],"equip":[71],"protocol":[74,137],"with":[76,155,182],"coverage-guided":[77],"packet":[78],"crack":[79,101],"generation.":[81],"We":[82],"collect":[83],"coverage":[85,99,167],"information":[86],"during":[87],"testing":[89],"procedure,":[90],"save":[91],"those":[92],"valuable":[93],"packets":[94,113],"that":[95],"trigger":[96],"new":[97,112],"path":[98],"them":[102],"into":[103],"pieces,":[104],"based":[105],"on":[106,125,142],"which,":[107],"can":[109],"construct":[110],"higher-quality":[111],"for":[114],"further":[115],"testing.":[116],"For":[117],"evaluation,":[118],"build":[120],"Peach":[121,159],"<sup":[122,160],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[123,161],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">*</sup>":[124,162],"top":[126],"Peach,":[128,158],"which":[129],"one":[131],"most":[134],"widely":[135],"used":[136],"fuzzers,":[138],"conduct":[140],"experiments":[141],"several":[143],"Modbus":[148],"DNP3.":[150],"Results":[151],"show":[152],"that,":[153],"compared":[154],"original":[157],"achieves":[163],"same":[165],"code":[166],"bug":[169],"numbers":[171],"at":[172],"speed":[174],"1.2X-25X.":[176],"It":[177],"also":[178],"gains":[179],"final":[180],"increase":[181],"8.35%-36.84%":[183],"more":[184],"paths":[185],"within":[186],"24":[187],"hours":[188],"has":[190],"9":[192],"previously":[193],"unknown":[194],"vulnerabilities.":[195]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":15},{"year":2024,"cited_by_count":21},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":8},{"year":2021,"cited_by_count":11}],"updated_date":"2026-07-02T09:51:11.867554","created_date":"2025-10-10T00:00:00"}